. . "The facility can release your records only with your written consent or that of your representative and must specify the circumstances under which your record may be released, except as specified by law." . .